AnWP Football Leagues
AnWP Football Leagues has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10.
The most common weakness is Improper Neutralization Of Formula Elements In A CSV File, behind 1 of the records (50%). Other recurring categories include Improper Neutralization Of Input During Web Page Generation.
Every one of the 2 issues recorded for AnWP Football Leagues has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. AnWP Football Leagues is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2024-8917AnWP Football Leagues <= 0.16.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Read the full analysisVulnerability Records

AnWP Football Leagues
Author
Andrei Strekozov
A complete solution for any ⚽ football site. Has a variety of unique features, powerful and flexible. Made with football in mind. ⏩ For other team sports (🏉 rugby, 🏀 basketball, 🏐 volleyball, 🏏 cricket, ⚾ baseball, 🏒 ice hockey, handball) use my another plugin – Sports Leagues BASIC FEATURES ✅ intuitive admin UI ✅ knockout, round-robin or even mixed and multistaged Competition supported ✅ separate Club squad for every season (with player position, number, status) ✅ Match lineups, substitutes, stats, events (goals, cards, substitute, penalty shootout), video, staff, referees ✅ automatic Standing calculation (or manual) ✅ automatic Player statistic calculation based on Match events (playing time, goals, cards, etc.) ✅ initial data import for Clubs and Players with Excel-like spreadsheet ✅ custom colors in Standing table (for Clubs or places) ✅ flipped countdown timer for upcoming Matches ✅ initial points (+ or -) for Clubs in Standing table ✅ statistics at Player profile page ✅ stadiums with photo, gallery, additional information, map, matches ✅ widgets: Clubs, Matches, Cards, Next match, Player, Players (scorers or assistants), Standing table, Birthdays ✅ 16 different shortcodes with UI helper in Classic Editor ✅ template system (ability to override output layouts in your theme) ✅ RTL support ✅ works with most themes out of the box ✅ fully translatable from the Admin part ✅ tons of hooks for developers ✅ staff, referees, coaches, stadiums and much more … LINKS AND DOCUMENTATION Plugin Demo | Plugin Overview Online Documentation | Start Guide | Extended Changelog | Available Shortcodes PREMIUM VERSION AVAILABLE Want more? Football Leagues has also a Premium Addon with many outstanding and unique features. Premium Demo | Real Website Example PREMIUM FEATURES 🔶 Live Scores and Match Live Commentary with Events 🔶 Match Timeline 🔶 LIVE Search 🔶 Club match formation 🔶 Layout Builder (with tabs) 🔶 Match scoreboard with image background 🔶 Tournament Bracket 🔶 Commentary Match section with new events 🔶 Head to Head matches section in Match 🔶 import data from external APIs (required a valid subscription) 🔶 Standing – manual data edit 🔶 Standing – columns order and visibility 🔶 Standing – Conference support 🔶 Standing – more ranking rules 🔶 Matches Horizontal Scoreboard (shortcode) 🔶 Competition – matchweeks as slides 🔶 Results Matrix 🔶 Standing Arrows – Dynamics of Ranking changes 🔶 Widget – Next match extended (timer or flipped countdown) 🔶 Widget – Competition Matchweek slides 🔶 Widget – Calendar 🔶 Calendar Slider 🔶 Card Suspension 🔶 Transfers 🔶 Dynamic SEO Options 🔶 Send Game Report by Email 🔶 Automatic User’s Timezone 🔶 AI Match Reports 🔶 Club History – Historical logos and names 🔶 Entity Links – Custom links for clubs, players, and more 🔶 Advanced Statistics 🔶 Charts: Team Default Statistics & Goals per 15 min. interval 🔶 Player stats section in Club 🔶 Player & Referee stats panel 🔶 24 different shortcodes 🔶 premium support Find Out more about Premium Version Plugin Overview Translations included English – default, always included Russian: Русский Polish: Polski (thanks to @forzza) Danish: Denmark (thanks to @cbdk) French: thanks to @belgofoot Italian: thanks to Paolo Slovenian: thanks to Nejc Romanian: thanks to Gabriel German: thanks to Jörg and Sven Greek: thanks to spirossm Spain: thanks to Màxim Brazil (Portuguese): thanks to Marcelo Dutch: thanks to Patrick The plugin requires PHP version 5.6 or greater WordPress 4.7 or greater CMB2 plugin
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C